memorandum for general rfp configurationdsitspe01.its.ms.gov/.../$file/44647loc.docx · web...

Memorandum for General RFP Configuration

To: Vendor with current valid proposal for General RFP #3849 for Computer Hardware and Software

From: Craig P. Orgeron, Ph.D.

CC: ITS Project File Number 44647

Date: Thursday, December 20, 2018

Subject: Letter of Configuration (LOC) Number 44647 for the procurement of two NextGeneration Firewalls for the Public Employees’ Retirement System of Mississippi (PERS)

Contact Name: Jill Chastant

Contact Phone Number: 601-432-8214

Contact E-mail Address: [email protected]

The Mississippi Department of Information Technology Services (ITS) is seeking the hardware, software and services described below on behalf of the Public Employees’ Retirement System of Mississippi (PERS). Our records indicate that your company currently has a valid proposal on file at ITS in response to General RFP #3849 for Computer Hardware and Software. Please review this document to determine if your company offers products, software and/or services that meet the requirements of this project. Written responses for the requested products, software and/or services will be considered.

1. GENERAL LOC INSTRUCTIONS

1.1 Beginning with Item 2, label and respond to each outline point as it is labeled in the LOC.

1.2 The Vendor must respond with “ACKNOWLEDGED,” “WILL COMPLY,” or “AGREED” to each point in the LOC including the attached Standard Purchase Agreement, (Attachment D), as follows:

1.2.1 “ACKNOWLEDGED” should be used when a Vendor response or Vendor compliance is not required. “ACKNOWLEDGED” simply means the Vendor is confirming to the State that he read the statement. This is commonly used in sections where the agency’s current operating environment is described or where general information is being given about the project.

Hardware, Software, Services LOCRevised: 9/10/2018

1.2.2 “WILL COMPLY” or “AGREED” are used interchangeably to indicate that the Vendor will adhere to the requirement. These terms are used to respond to statements that specify that a Vendor or Vendor’s proposed solution must comply with a specific item or must perform a certain task.

1.3 If the Vendor cannot respond with “ACKNOWLEDGED,” “WILL COMPLY,” or “AGREED,” then the Vendor must respond with “EXCEPTION.” (See instructions in Item 13 regarding Vendor exceptions.)

1.4 Where an outline point asks a question or requests information, the Vendor must respond with the specific answer or information requested in addition to “WILL COMPLY” or “AGREED”.

1.5 In addition to the above, Vendor must provide explicit details as to the manner and degree to which the proposal meets or exceeds each specification.

2. GENERAL OVERVIEW AND BACKGROUNDThe Public Employees’ Retirement System of Mississippi (PERS) purchased and implemented a Cisco Adaptive Security Appliance (ASA) 5510 in the fall of 2010 to replace a problematic Symantec SGS 5441 firewall. At the time, PERS was preparing for a project to replace its pension administration system and recognized that the Symantec firewall would neither meet throughput requirements of the new system nor provide adequate VPN connectivity for remote contractors. PERS was struggling at the time with frequent challenges related to its proxy-based web filtering device called EdgeWave iPrism.

PERS began researching next-generation firewalls (NGFW) in 2013 to provide web filtering and an extra layer of security at the parameter of the network. After reviewing options from many manufacturers, a Palo Alto Networks PA-3020 device was purchased, and it replaced the EdgeWave iPrism device. An additional PA-3020 device was added the following year to provide high availability in case of hardware failure. Subsequently, Cisco released an end-of-life statement in March of 2013 for the ASA 5510 device and a last hardware support date of September 2018.

PERS seeks to replace all existing firewalls with a next-generation firewall solution that will provide a modern zero-trust network architecture capable of inspecting all network traffic. The solution must protect all network users, datacenter systems, and provide enough throughput to handle SSL decryption, VPN connectivity, and traffic generated by a future pension self-service portal. Due to the current knowledge investment in PAN OS and overall experience with the PA-3020 device, PERS wishes to purchase two Palo Alto Networks PA-5220 or functional equivalent.

3. PROCUREMENT PROJECT SCHEDULETask DateRelease of LOC Thursday, December 20, 2018Deadline for Vendors’ Written Questions Friday, January 4, 2019 at 3:00 p.m.

Central TimeAddendum with Vendors’ Questions and Answers

Wednesday, January 16, 2019

2


Proposals Due Thursday, January 24, 2019 at 3:00 p.m. Central Time

Begin Proposal Evaluation Thursday, January 24, 2019Notification of Award Friday, February 8, 2019Begin Contract Negotiations Monday, February 11, 2019

4. STATEMENTS OF UNDERSTANDING

4.1 The Vendor must provide pricing for all hardware, software, maintenance and support for the proposed solution.

4.2 Proposed equipment must be new from the manufacturer and qualify for warranty and maintenance services.

4.3 Vendor must be aware that ITS reserves the right to make additional purchases at the proposed prices for a six (6) month period.

4.4 Vendor must be aware that ITS reserves the right to award this project to one or more Vendors if advantageous to the State.

4.5 Vendor must be aware that the specifications detailed below are minimum requirements. Should Vendor choose to exceed the requirements, Vendor must indicate in what manner the requirements are exceeded.

4.6 All specifications listed in this document are intended to be open and competitive. Vendors are encouraged to question any specification that appears to be closed and/or restricts competition.

4.7 The State reserves the right to solicit Best and Final Offers (BAFOs) from Vendors, principally in situations in which proposal costs eclipse available funding or the State believes none of the competing proposals presents a Best Value (lowest and best proposal) opportunity. Because of the time and expense incurred by both the Vendor community and the State, BAFOs are not routinely conducted. Vendors should offer their best pricing with the initial solicitation. Situations warranting solicitation of a BAFO will be considered an exceptional practice for any procurement. Vendors that remain in a competitive range within an evaluation may be requested to tender Best and Final Offers, at the sole discretion of the State. All such Vendors will be provided an equal opportunity to respond with a Best and Final Offer under a procedure to be defined by the State that encompasses the specific, refined needs of a project, as part of the BAFO solicitation. The State may re-evaluate and amend the original project specifications should it be deemed necessary in order to improve the opportunity for attaining Best Value scenarios from among the remaining competing Vendors. All BAFO proceedings will be uniformly conducted, in writing and subject to solicitation by the State and receipt from the Vendors under a precise schedule.

4.8 It is the State’s intention that the hardware and software ship to PERS, Attn: Derek Moore at 429 Mississippi Street, Jackson, Mississippi 39201 and be installed on or before March 15, 2019.

3


4.9 Vendor acknowledges that if awarded, it will ensure its compliance with the Mississippi Employment Protection Act, Section 71-11-1, et seq. of the Mississippi Code Annotated (Supp2008), and will register and participate in the status verification system for all newly hired employees. The term “employee” as used herein means any person that is hired to perform work within the State of Mississippi. As used herein, “status verification system” means the Illegal Immigration Reform and Immigration Responsibility Act of 1996 that is operated by the United States Department of Homeland Security, also known as the E-Verify Program, or any other successor electronic verification system replacing the E-Verify Program. Vendor will agree to maintain records of such compliance and, upon request of the State, to provide a copy of each such verification to the State.

4.10 Vendor acknowledges that violating the E-Verify Program (or successor thereto) requirements subjects Vendor to the following: (a) cancellation of any state or public contract and ineligibility for any state or public contract for up to three (3) years, with notice of such cancellation being made public, or (b) the loss of any license, permit, certification or other document granted to Vendor by an agency, department or governmental entity for the right to do business in Mississippi for up to one (1) year, or (c) both. Vendor would also be liable for any additional costs incurred by the State due to contract cancellation or loss of license or permit. Vendor acknowledges and certifies that any person assigned to perform services hereunder meets the employment eligibility requirements of all immigration laws of the State of Mississippi.

4.11 Any solution or service proposed in response to this LOC must be in compliance with the State of Mississippi’s Enterprise Security Policy. The Enterprise Security Policy is based on industry-standard best practices, policy, and guidelines and is established to safeguard the State’s information technology (IT) assets from unauthorized use, access, disclosure, modification, or destruction. Given that information security is an evolving technology practice, the State reserves the right to introduce new policy during the term of the contract resulting from this LOC and require the Vendor to ensure the solution or service complies with same in the event the industry introduces more secure, robust solutions or practices that facilitate a more secure posture for the State of Mississippi. Vendors wanting to view the Enterprise Security Policy should contact the Technology Consultant listed in 4.13.1 below.

4.12 Any cloud or vendor-hosted solution proposed in response to this LOC must be in compliance with the State of Mississippi’s Enterprise Cloud and Offsite Hosting Security Policy. The Enterprise Cloud and Offsite Hosting Security Policy is based on industry-standard best practices, policy, and guidelines and augments the Enterprise Security Policy. Given that information security is an evolving technology practice, the State reserves the right to introduce new policy during the term of the contract resulting from this LOC and require the Vendor to ensure the cloud or vendor-hosted solution complies with same in the event the industry introduces more secure, robust solutions or practices that facilitate a more secure posture for the State of Mississippi. Vendors wanting to view the Enterprise Cloud and Offsite Hosting Security Policy should contact the Technology Consultant listed in 4.13.1 below.

4


4.13 From the issue date of this LOC until a Vendor is selected and the selection is announced, responding Vendors or their representatives may not communicate, either orally or in writing regarding this LOC with any statewide elected official, state officer or employee, member of the legislature or legislative employee except as noted herein. To ensure equal treatment for each responding Vendor, all questions regarding this LOC must be submitted in writing to the State’s Contact Person for the selection process, no later than the last date for accepting responding Vendor questions provided in this LOC. All such questions will be answered officially by the State in writing. All such questions and answers will become addenda to this LOC. Vendors failing to comply with this requirement will be subject to disqualification.

4.13.1 The State contact person for the selection process is: Jill Chastant, Technology Consultant, 3771 Eastwood Drive, Jackson, Mississippi 39211, 601-432-8214, [email protected].

4.13.2 Vendor may consult with State representatives as designated by the State contact person identified in 4.13.1 above in response to State-initiated inquiries. Vendor may consult with State representatives during scheduled oral presentations and demonstrations excluding site visits.

4.14 Subject to acceptance by ITS, the Vendor acknowledges that by submitting a proposal, the Vendor is contractually obligated to comply with all items in this LOC, including the Standard Purchase Agreement, Attachment D if included herein, except those listed as exceptions on the Proposal Exception Summary Form. If no Proposal Exception Summary Form is included, the Vendor is indicating that he takes no exceptions. This acknowledgement also contractually obligates any and all subcontractors that may be proposed. Vendors may not later take exception to any point during contract negotiations.

5. FUNCTIONAL/TECHNICAL SPECIFICATIONS

5.1 Vendor must provide pricing for the equipment listed in Attachment A. Vendor must detail (by part number and/or description) any items that are functionally equivalent and substituted for the item listed in the table below.

5.2 If the Vendor proposes a firewall other than the preferred model (Palo Alto Networks PA-5220), Vendor must substantiate that the performance of the proposed firewall is equal to or greater than that of the referenced model (Palo Alto Networks PA-5220) and will interface seamlessly.

5.3 Vendor must state qualifications to include organization of the company, number of years in business, number of years products/services of similar scope/size to this project have been sold, partnerships, etc.

5.4 Platform – The Vendor must state for Items 5.4.1 through 5.4.12, how the proposed firewalls meet or exceed the requirement.

5.4.1 The Vendor shall propose 2 Next Generation Firewalls (proposed firewalls) with a capability of supporting at least EIGHTEEN (18)

5


gigabit per second of application firewall throughput and NINE (9) gigabit per second for threat prevention and modern malware protection. One of the two firewalls shall be an offline spare.

5.4.2 The proposed firewalls shall support at least FOUR (4) million concurrent sessions and at least ONE HUNDRED AND SEVENTY ONE THOUSAND (171,000) new sessions per second.

5.4.3 The proposed firewalls shall support at least EIGHTEEN (18) gigabit per second per second threat prevention throughput and at least NINE (9) gigabit per second threat prevention Uniform Resource Locator (URL) filtering throughput simultaneously. Vendor must provide with response 3rd party test reports to substantiate performance e.g. NSS LABS.

5.4.4 The proposed firewalls shall support at least TEN (10) gigabit per second throughput with threat prevention, application awareness, URL filtering, antivirus, with SSL VPN turned on simultaneously. Vendor must provide with response 3rd party test reports to substantiate performance e.g. NSS LABS.

5.4.5 The proposed firewalls shall be able to protect a minimum of TWENTY FIVE HUNDRED (2,500) security zone segments and have at least TWENTY FOUR (24) network ports.

5.4.6 The proposed firewalls shall include FOUR (4) 1 Gbps RJ45 ports and SIXTEEN (16) 1/10 Gbps SFP+ ports. Four (4) of the SFP+ ports shall be populated with SFP+ SR optical LC transceiver modules provided by the firewall manufacturer.

5.4.7 The proposed firewalls must allow policy rule creation for application identification, user identification, threat prevention, Uniform Resource Locator (URL) filtering, traffic management Quality of Service (QoS) per policy and scheduling in a single unified rule and not in multiple data-entry locations in the management console.

5.4.8 The proposed firewalls shall have a hardened Operating System (OS) and be built as a firewall appliance (i.e. not on generic server hardware) and shall handle traffic in a single pass stream-based manner with all features turned on. It shall be optimized for layer 7 application level content processing and have special Application-Specific Integrated Circuit (ASIC) to handle signature matching and processing in a single pass parallel processing architecture.

5.4.9 The proposed firewalls shall be administered locally on the appliance without additional management or logging software, or web browser plug-ins such as Java, and must support both SSH and HTTPS connectivity.

6


5.4.10 The proposed firewalls shall have modern malware protection that identifies unknown malicious files by directly and automatically executing them in a virtual cloud-based environment to expose malicious behavior even if the malware has never been seen in the wild without the need for additional hardware. Vendor must state the name of the modern malware protection.

5.4.11 The proposed firewalls shall support multiple logically separated virtual systems or contexts on a physical firewall up to TWENTY (20) virtual firewalls.

5.4.12 The proposed firewalls must have ICSA Labs certification or similar.

5.5 Operation Mode - The Vendor must state for Items 5.5.1 through 5.5.11, how the proposed firewalls meet or exceed the requirement.

5.5.1 The proposed firewalls shall support policy based Network Address Translation (NAT) and Port Address Translation (PAT) and be able to operate in routing/NAT mode.

5.5.2 The proposed firewalls shall support Denial of Service (DoS) and fragmented packet Transmission Control Protocol (TCP) reassembly, brute force attack, “SYN cookie”, “IP spoofing”, and malformed packet protection.

5.5.3 The proposed firewalls shall support transparent and tap mode within the appliance.

5.5.4 The proposed firewalls shall support 802.1Q Virtual Local Area Networks (VLANs) tagging (in tap, transparent, layer 2 and layer 3).

5.5.5 The proposed firewalls shall support dual IPv4 and IPv6 stacks application control and threat inspection support in tap mode, transparent mode, layer 2, and layer 3.

5.5.6 The proposed firewalls shall support standards based link aggregation (IEEE 802.3ad) to achieve higher bandwidth.

5.5.7 The proposed firewalls shall support logical Ethernet sub-interfaces tagged and untagged.

5.5.8 The proposed firewalls shall support static, Routing Information Protocol version 2 (RIPv2), Open Shortest Path First (OSPF), and Border Gateway Protocol version 4 (BGPv4) routing protocols.

5.5.9 The proposed firewalls shall support policy based forwarding based on zone, source or destination address, source or destination port, application, and Active Directory (AD)/ Lightweight Directory Access Protocol (LDAP) Remote Authentication Dial-In User Service (RADIUS) user or user groups.

7


5.5.10 The proposed firewalls shall support Domain Name System (DNS) proxy and Dynamic Host Configuration Protocol for IPv6 (DHCPv6) relay.

5.5.11 The proposed firewalls shall support IPv6 routing for virtual routers.

5.6 High Availability (HA) (Optional) - The Vendor must state for Items 5.6.1 through 5.6.5, how the proposed firewalls meet or exceed the requirement.

5.6.1 The proposed firewalls overall solution shall be capable of High Availability Configuration.

5.6.2 The proposed firewalls solution shall support active/active and active/passive HA configuration.

5.6.3 The proposed firewall solution shall be capable of detecting link and path failure in addition to device failure.

5.6.4 The proposed firewall solution shall be capable of supporting encryption of HA heartbeat and control traffic.

5.6.5 The proposed firewalls shall synchronize all sessions, decryption certificates, all VPN security associations, all threat and application signatures, all configuration changes and Forwarding Information Base (FIB) tables for HA.

5.7 Central Management (Optional) - The Vendor must state for Items 5.7.1 through 5.7.5, how the proposed firewalls meet or exceed the requirement.

5.7.1 The proposed firewall solution shall support a centralized management server for enterprise management of the firewall devices and have no feature disparity from the location management GUI.

5.7.2 The proposed reporting management system shall be capable of allowing updating of the latest signature updates manually or automatically. Rich reports shall be generated based on application, users, and threats or in any combination.

5.7.3 The management server shall provide the ability to generate and deploy numerous policies to multiple firewalls through intuitive policy management user interface.

5.7.4 The management server shall support report generation on a manual ad-hoc or schedule (daily, weekly, monthly, etc.) basis.

5.7.5 The logs from the management server shall allow for archiving and backup of configurations and historical logs to tapes or similar devices.

8


5.8 Policy Based Controls - The Vendor must state for Items 5.8.1.1 through 5.8.1.8, how the proposed firewalls meet or exceed the requirement.

5.8.1 The proposed firewalls shall support:

5.8.1.1 policy control by port and/or protocol;

5.8.1.2 policy control based on application or application category;

5.8.1.3 policy control based on user or user group;

5.8.1.4 policy control based on IP address;

5.8.1.5 policy control by country code;

5.8.1.6 per policy Secure Shell (SSH) decryption and inspection;

5.8.1.7 IPv6 rules/objects; and

5.8.1.8 multicast rules/objects.

5.9 Application Security Policy - The Vendor must state for Items 5.9.1 through 5.9.6, how the proposed firewalls meet or exceed the requirement.

5.9.1 The proposed firewalls shall support network traffic classification, which identifies applications across all ports irrespective of port/protocol/evasive tactics.

5.9.2 The proposed firewalls shall have multiple mechanisms for classifying applications and application identification technology based upon Intrusion Prevention System (IPS) or deep packet inspection.

5.9.3 The proposed firewalls shall include a searchable list of currently identified applications with explanation and links to external sites for further clarification.

5.9.4 The proposed firewalls shall allow dynamic updates of the application database (DB) and not require a service restart or reboot.

5.9.5 The proposed firewalls shall warn the end-user with a customizable page when the application is blocked.

5.9.6 The proposed firewalls shall support user-identification allowing AD, LDAP, RADIUS groups, or users to access a particular application, while denying others.

9


5.10 URL Filtering - The Vendor must state for Items 5.10.1 through 5.10.3, how the proposed firewalls meet or exceed the requirement.

5.10.1 The proposed firewalls shall support URL filtering/categorization and have database stored locally on the appliance.

5.10.2 The proposed firewalls shall support logs populated with end user activity reports for site monitoring within the local firewall.

5.10.3 The proposed firewalls shall support URL filtering policies by AD/LDAP user, user group, machines and IP address/range.

5.11 Threat Prevention - The Vendor must state for Items 5.11.1 through 5.11.3, how the proposed firewalls meet or exceed the requirement.

5.11.1 The proposed firewalls shall support IPS features on the proposed firewall appliance and antivirus and anti-malware

5.11.2 The proposed firewalls shall perform stream-based antivirus and anti-malware and not store-and-forward traffic inspection.

5.11.3 The proposed firewalls shall block known network and application-layer vulnerability exploits.

5.12 Data Filtering - The Vendor must state for Items 5.12.1 through 5.12.2, how the proposed firewalls meet or exceed the requirement.

5.12.1 The proposed firewalls shall support file identification by signature and not file extensions.

5.12.2 The proposed firewalls shall unpack zipped file for packet inspection.

5.13 User Identification - The Vendor must state for Items 5.13.1 through 5.13.4, how the proposed firewalls meet or exceed the requirement.

5.13.1 The proposed firewalls shall support authentication services for AD, LDAP, RADIUS, Kerberos, and client certificate.

5.13.2 The proposed firewalls shall support the creation of security policy based on AD Users and Groups in addition to source/destination IP.

5.13.3 The proposed firewalls shall support user identification in policy without installing an agent on individual endpoints.

5.13.4 The proposed firewalls shall populate and correlate all logs with user identity (traffic, IPS, URL, data, etc.) without any additional products or modules in real-time.

5.14 SSL/SSH Decryption - The Vendor must state for Items 5.14.1 through 5.14.2, how the proposed firewalls meet or exceed the requirement.

10


5.14.1 The proposed firewalls shall be able to identify, decrypt, and evaluate SSL/SSH traffic in an outbound and inbound connection.

5.14.2 The proposed firewalls shall be able to decrypt in tap, transparent, layer 2, and layer 3 modes.

5.15 Modern Malware Prevention - The Vendor must state for Items 5.15.1 and 5.15.2, how the proposed firewalls meet or exceed the requirement.

5.15.1 The proposed firewalls shall support automated signature generation for discovered malware.

5.15.2 The proposed firewalls shall support in-line control of malware infection and command/control traffic.

5.16 If any component(s) necessary for operation of the requested system is omitted from Vendor’s proposal, Vendor must be willing to provide the component(s) at no additional cost. This includes, but is not limited to, all cabling, connectors, raceway, etc. necessary to render the configuration fully operational.

6. INTERNET PROTOCOL VERSION 6 (IPv6) REQUIREMENTS

6.1 General

6.1.1 The Vendor shall furnish/design the firewall appliance (also known as ‘Infrastructure’ to support the co-existence of IPv4 and IPv6). If it is not compliant, the Vendor shall advise the roadmap and propose how the system can be upgraded.

6.2 Connectivity

6.2.1 The Vendor shall propose the Next Generation Firewall Appliance that will support operations in the following scenarios, but not limited to:

6.2.1.1 Connect to legacy network and application, which supports IPv4 only;

6.2.1.2 Connect to local Internet Service Provider (ISP) and IPv6 service and the end-user using IPv6 only; and

6.2.1.3 Connect to local ISP and IPv4 service and the remote ISP and IPv6 service and the remote end-user using IPv6 only.

6.3 Standards - The Vendor must state for Items 6.3.1.1 through 6.3.1.2, how the proposed firewalls meet or exceed the requirement.

6.3.1 The Vendor shall:

11


6.3.1.1 Ensure that the hardware and software and/or enhancement is aligned with the prevailing Singapore IPv6 profile found in www.ida.gov.sg and recognized international standards such as IETF, ITU, etc. Exceptions to these guidelines shall be clearly highlighted.

6.3.1.2 Provide documentation that the proposed solution shall meet the required functionalities to ensure a smooth transition roadmap to co-existence of IPv4 and IPv6.

6.4 Maintenance and Support

6.4.1 The Vendor shall provide information on whether any patches, upgrades, or additional hardware and/or software and/or services are needed to be purchased or installed in order for the proposed hardware and software to support the co-existence of IPv4 and IPv6 environment.

6.5 Capability

6.5.1 The Vendor should have documented qualifications in IPv4 and IPv6.

6.5.2 The Vendor should have experience in designing and/or implementing IPv4 and IPv6 projects.

6.5.3 The Vendor shall have experienced and certified personnel for the proposed solution.

7. INSTALLATION

7.1 Vendor must provide not-to-exceed cost for installation. Installation will include: unpacking, setup (including VLAN and subnet integration), physical installation of the equipment, installation of peripherals, and meeting with PERS to verify installation requirements.

7.2 Vendor must indicate if Vendor personnel or manufacturer personnel will provide the installation.

7.2.1 If Vendor personnel:

7.2.1.1 Vendor must provide documentation substantiating authorization to provide installation.

7.2.1.2 Vendor must disclose if individual(s) is a Public Employees Retirement System (PERS) member currently receiving monthly benefits. It is the individual’s responsibility to verify that work performed in association with this LOC is in

12

http://www.ida.gov.sg/


compliance with the guidelines set forth by PERS for re-employment at a PERS-covered agency.

7.3 Vendor must detail the installation approach and plan.

8. TRAINING

8.1 Vendor must propose whatever training is recommended in order for local administrators to utilize the proposed system. A detailed description of the training including course/class content, duration, number of staff/size of class, and location of the training must be included with Vendor’s response. Costs associated with training must be included in Attachment A, Cost Information Form, as a separate line item.

8.2 Vendor must indicate if Vendor personnel or 3rd party personnel will provide the training. If 3rd party personnel will provide the training, Vendor must submit documentation substantiating authorization of the 3rd party to provide the training. If Vendor personnel will provide the training, Vendor must submit documentation substantiating authorization to provide training if the Vendor is not the manufacturer/developer of the proposed item.

9. WARRANTY/MAINTENANCE

9.1 Vendors must state the warranty period for each item proposed, during which time maintenance need not be paid. Warranty must include at a minimum parts and labor.

9.2 If warranty period is less than three years, Vendor must provide pricing to extend the warranty to three years for each item proposed.

9.3 Vendors must detail what is included in the standard warranty for each item proposed.

9.4 Vendor must indicate whether warranty service is available past the three years for each item proposed. Specify annual cost, if any, and period of extension. If no cost is specified, the Agreement cannot be extended beyond three years.

9.5 Vendor must state if warranty is on-site or depot for each item proposed.

9.5.1 If depot, Vendor must indicate maximum turnaround time from shipment of hardware.

9.5.2 If on-site, when the Vendor receives an initial service call on products, who makes the initial on-site call? Does it depend on the client location?

9.5.3 If on-site, then Vendor must provide details on how a call is initiated and all steps involved in getting the item repaired.

13


9.6 Vendor must indicate what the response time will be for responding to the initial call, coming on-site, and providing a resolution. This detail must include an average response time as well as a not-to-exceed time-frame for each type of response.

9.7 Vendor must specify escalation procedures for the State should a warranty call not be handled to the State’s satisfaction.

10. MANUFACTURER DIRECT MAINTENANCE

10.1 ITS understands that the maintenance requested in this LOC may be provided directly by the manufacturer. If Vendor is the named manufacturer and will be supplying the maintenance services directly, Items 10.1.4 through 10.1.13 do not have to be completed.

10.1.1 Responding Vendor must clarify whether he is the named manufacturer and will be supplying the maintenance services directly or whether he is a third party reseller selling the maintenance services on behalf of the manufacturer.

10.1.2 Responding Vendor must explain his understanding of when or whether the manufacturer will ever sell the maintenance services directly and, if so, under what circumstances.

10.1.2.1 If the responding Vendor to this LOC will only be reselling manufacturer’s maintenance services, it is ITS’ understanding that this is basically a “pass through” process.

10.1.2.2 Please provide a detailed explanation of the relationship of who will be providing the requested maintenance, to whom the purchase order is made, and to whom the remittance will be made. If there is a difference in the year one maintenance purchase versus subsequent years of maintenance, the responding Vendor must clarify and explain.

10.1.3 Manufacturer Direct Maintenance when sold directly through the manufacturer: Fixed Cost

10.1.3.1 If responding Vendor is the direct manufacturer, he must propose annual fixed pricing for three years of the requested maintenance. Vendor must provide all details of the maintenance/support and all associated costs.

10.1.3.2 It is ITS’ preference that the Manufacturer’s proposal is a not-to-exceed firm commitment. In the event that the manufacturer cannot commit to a fixed

14


cost for the subsequent years of maintenance after year one, Manufacturer must specify the annual maintenance increase ceiling offered by his company on the proposed products. Vendor must state his policy regarding increasing maintenance charges. Price escalations for Maintenance shall not exceed 5% increase per year.

10.1.4 Manufacturer Direct Maintenance when sold through 3rd Party: Fixed Cost-Plus Percentages

10.1.4.1 In the case of a third-party “pass-through” ITS realizes that the responding reseller may not be able to guarantee a fixed price for maintenance after year one since his proposal is dependent on the manufacturer’s pricing or possibly on a distributor’s pricing.

10.1.4.2 It is ITS’ preference that the responding reseller work with the manufacturer to obtain a commitment for a firm fixed price over the requested maintenance period.

10.1.5 In the event that the responding reseller cannot make a firm fixed maintenance proposal for all the years requested, the responding reseller is required to provide a fixed percentage for his mark-up on the manufacturer direct maintenance that he is selling as a third party reseller in lieu of a price ceiling based on a percentage yearly increase.

10.1.5.1 In this scenario, Resellers must include in the Pricing Spreadsheets the price the Vendor pays for the maintenance and the percentage by which the final price to the State of Mississippi exceeds the Vendor’s cost for the maintenance (i.e. cost-plus percentage).

10.1.5.2 Alternatively, Resellers may propose a fixed percentage for their mark down on the manufacturer’s direct maintenance based on a national benchmark from the manufacturer, such as GSA, Suggested Retail Price (SRP) or the manufacturer’s web pricing. This national benchmark pricing must be verifiable by ITS during the maintenance contract.

10.1.6 The cost-plus/minus percentage will be fixed for the term specified in the LOC. To clarify, the State’s cost for the products will change over the life of the award if the price the Vendor must pay

15


for a given product increases or decreases. However, the percentage over Vendor cost which determines the State’s final price WILL NOT change over the life of the award.

10.1.7 ITS will use this percentage in evaluating cost for scoring purposes.

10.1.8 The cost-plus/minus percentage applies to new products added in the categories covered by the Cost Matrix as well as the products that are listed.

10.1.9 Periodic Cost-Plus Verification - At any time during the term of this contract, the State reserves the right to request from the awarded Vendor, access to and/or a copy of the Manufacturer’s Base Pricing Structure for pricing verification. This pricing shall be submitted within seven (7) business days after the State’s request. Failure to submit this pricing will be cause for Contract Default.

10.1.9.1 Vendor Cost is defined as the Vendor’s invoice cost from the distributor or manufacturer.

10.1.9.2 The Vendor’s Proposed State Price is defined as the Vendor Cost plus the proposed percentage mark-up.

10.1.10 Vendor must also indicate how future pricing information will be provided to the State during the term of the contract.

10.1.11 Vendor must indicate from whom he buys the maintenance: directly from the manufacturer or from what distributor.

10.1.12 Vendor must be aware that only price increases resulting from an increase in price by the manufacturer or distributor will be accepted. The Vendor’s proposed percentage markup or markdown for these items, as well as the Vendor’s percentage markup or markdown for any new items, MUST stay the same as what was originally proposed. Vendor must provide ITS with the suggested retail price.

10.1.13 Pricing proposed for the State MUST equal the Vendor’s invoice cost from the distributor or manufacturer plus the maximum percentage markup that the reseller will add OR the manufacturer’s national benchmark minus the cost percentage proposed.

11. REFERENCES

11.1 Vendor must provide at least three (3) references. A form for providing reference information is attached as Attachment B. ITS requires that references be from

16


completed and/or substantially completed jobs that closely match this request. Reference information must include, at a minimum,

11.1.1 Entity

11.1.2 Supervisor’s name

11.1.3 Supervisor’s telephone number

11.1.4 Supervisor’s e-mail address

11.1.5 Length of Project

11.1.6 Brief Description of Project to include Vendor’s specific role in the project

11.2 The Vendor must make arrangements in advance with the account references so that they may be contacted at the Project team's convenience without further clearance or Vendor intercession. Failure to provide this information in the manner described may subject the Vendor’s proposal to being rated unfavorably relative to these criteria or disqualified altogether at the State’s sole discretion.

11.3 References that are no longer in business cannot be used. Inability to reach the reference will result in that reference deemed non-responsive.

11.4 Vendors receiving negative references may be eliminated from further consideration.

11.5 The State reserves the right to request information about the Vendor from any previous customer of the Vendor of whom the State is aware, including the procuring agency and/or other agencies or institutions of the State, even if that customer is not included in the Vendor’s list of references, and to utilize such information in the evaluation of the Vendor's proposal.

11.6 Any of the following may subject the Vendor’s proposal to being rated unfavorably relative to these criteria or removed from further consideration, at the State’s sole discretion:

11.6.1 Failure to provide reference information in the manner described;

11.6.2 Inability of the State to substantiate minimum experience or other requirements from the references provided;

11.6.3 Non-responsiveness of references to the State's attempts to contact them; or

11.6.4 Unfavorable references that raise serious concerns about material risks to the State in contracting with the Vendor for the proposed products or services.

12. ADDITIONAL REQUIREMENTS

17


12.1 ITS acknowledges that the specifications within this LOC are not exhaustive. Rather, they reflect the known requirements that must be met by the proposed system. Vendors must specify, here, what additional components may be needed and are proposed in order to complete each configuration.

12.2 Vendor must specify the discounted price for each item. Freight is FOB destination. No itemized shipping charges will be accepted.

12.3 Vendor must provide all technical specifications and manuals (documentation) at the point of sale.

12.4 If Vendor proposes more than one alternative (no more than two), Vendor is responsible for identifying the alternative believed to be the best fit to meet the specified requirements.

12.5 A properly executed contract is a requirement of this LOC. After an award has been made, it will be necessary for the winning Vendor to execute a Purchase Agreement with ITS. A Standard Purchase Agreement, Attachment D, has been attached for your review. The inclusion of this Purchase Agreement does not preclude ITS from, at its sole discretion, negotiating additional terms and conditions with the selected Vendor(s) specific to the project(s) covered by this LOC. If Vendor cannot comply with any term or condition of this Purchase Agreement, Vendor must list and explain each specific exception on the Proposal Exception Summary Form, Attachment C, explained in Item 13 and attached to this LOC. Winning Vendor must be willing to sign the attached Purchase Agreement within 10 working days of the notice of award. If the Purchase Agreement is not executed within the 10 working day period, ITS reserves the right to terminate negotiations with the winning Vendor and proceed to negotiate with the next lowest and best Vendor in the evaluation.

12.6 Vendor must provide the state of incorporation of the company and a name, title, address, telephone number and e-mail for the “Notice” article of the contract.

12.7 Vendor must provide an order address.

12.8 Vendor must provide a remit address.

12.9 Vendor must provide their taxpayer identification number.

13. PROPOSAL EXCEPTIONS

13.1 Vendor must return the attached Proposal Exception Summary Form, Attachment C, with all exceptions listed and clearly explained or state “No Exceptions Taken.” If no Proposal Exception Summary Form is included, the Vendor is indicating that no exceptions are taken.

13.2 Unless specifically disallowed on any specification herein, the Vendor may take exception to any point within this memorandum as long as the following are true:

13.2.1 The specification is not a matter of State law;

18


13.2.2 The proposal still meets the intent of the procurement;

13.2.3 A Proposal Exception Summary Form (Attachment C) is included with Vendor’s proposal; and,

13.2.4 The exception is clearly explained, along with any alternative or substitution the Vendor proposes to address the intent of the specification, on the Proposal Exception Summary Form (Attachment C).

13.3 The Vendor has no liability to provide items to which an exception has been taken. ITS has no obligation to accept any exception. During the proposal evaluation and/or contract negotiation process, the Vendor and ITS will discuss each exception and take one of the following actions:

13.3.1 The Vendor will withdraw the exception and meet the specification in the manner prescribed;

13.3.2 ITS will determine that the exception neither poses significant risk to the project nor undermines the intent of the procurement and will accept the exception;

13.3.3 ITS and the Vendor will agree on compromise language dealing with the exception and will insert same into the contract; or,

13.3.4 None of the above actions is possible, and ITS either disqualifies the Vendor’s proposal or withdraws the award and proceeds to the next ranked Vendor.

13.4 Should ITS and the Vendor reach a successful agreement, ITS will sign adjacent to each exception which is being accepted or submit a formal written response to the Proposal Exception Summary responding to each of the Vendor’s exceptions. The Proposal Exception Summary, with those exceptions approved by ITS, will become a part of any contract on acquisitions made under this procurement.

13.5 An exception will be accepted or rejected at the sole discretion of the State.

13.6 The State desires to award this LOC to a Vendor or Vendors with whom there is a high probability of negotiating a mutually agreeable contract, substantially within the standard terms and conditions of the State's LOC, including the Standard Purchase Agreement, Attachment D, if included herein. As such, Vendors whose proposals, in the sole opinion of the State, reflect a substantial number of material exceptions to this LOC, may place themselves at a comparative disadvantage in the evaluation process or risk disqualification of their proposals.

13.7 For Vendors who have successfully negotiated a contract with ITS in the past, ITS requests that, prior to taking any exceptions to this LOC, the individual(s) preparing this proposal first confer with other individuals who have previously submitted proposals to ITS or participated in contract negotiations with ITS on

19


behalf of their company, to ensure the Vendor is consistent in the items to which it takes exception.

14. SCORING METHODOLOGY

14.1 An Evaluation Team composed of PERS and ITS staff will review and evaluate all proposals. All information provided by the Vendors, as well as any other information available to evaluation team, will be used to evaluate the proposals.

14.1.1 Each category included in the scoring mechanism is assigned a weight between one and 100.

14.1.2 The sum of all categories equals 100 possible points.

14.1.3 For the evaluation of this LOC, the Evaluation Team will use the following categories and possible points:

Category Possible Points

Cost 100Maximum Possible Points 100

14.2 The evaluation will be conducted in three stages as follows:

14.2.1 Stage 1 – Selection of Responsive/Valid Proposals – Each proposal will be reviewed to determine if it is sufficiently responsive to the LOC requirements to permit a complete evaluation. A responsive proposal must comply with the instructions stated in this LOC with regard to content, organization/format, Vendor experience and timely delivery. No evaluation points will be awarded in this stage. Failure to submit a complete proposal may result in rejection of the proposal.

14.3 Stage 2 – Cost Evaluation

14.3.1 Points will be assigned using the following formula:

(1-((B-A)/A))*n

Where:

A = Total lifecycle cost of lowest valid proposal

B = Total lifecycle cost of proposal being scored

n = Maximum number of points allocated to cost for this acquisition

In simpler terms, lowest price gets a perfect score. A proposal that is 20% more expensive than the lowest priced offering gets 20% fewer points.

20


14.3.2 When the above formula would result in a negative cost score (i.e. the lifecycle cost of the proposal being scored is more than twice that of the lowest valid proposal), the cost score is set to zero, rather than deducting points from the Vendor's score.

14.3.3 Cost categories and maximum point values are as follows:

Cost Category Possible PointsLifecycle Cost 100 Maximum Possible Points 100

14.4 Stage 3 – Selection of the successful Vendor

15. PROPOSAL SUBMISSION

15.1 Please use the attached Cost Information Form (Attachment A) to provide cost information. Follow the instructions on the form. Incomplete forms will not be processed.

15.2 In addition to providing Cost Information Form and Proposal Exception Summary Form (if applicable), Vendors must submit a proposal in response to this LOC as explained in Item 1. Vendors who do not provide this detail may be eliminated from further consideration.

15.3 If Vendor is claiming status as a Minority Business Enterprise or Woman Business Enterprise, the Vendor must include a copy of their Minority Vendor Self-Certification Form with their LOC response. A copy of the Minority Vendor Self-Certification Form can be obtained at:

http://www.mississippi.org/assets/docs/minority/minority_vendor_selfcertform.pdf

Please direct any questions about minority certification in Mississippi to the Minority Business Enterprise Division of the Mississippi Development Authority by telephone at (601) 359-3448 or via email at [email protected].

15.4 Vendor must provide a copy of their Certificate of Liability Insurance with their LOC response.

15.5 Vendor must provide documentation of their E-Verify compliance with their LOC response.

16. DELIVERY INSTRUCTIONS

16.1 Vendor must deliver the response to Jill Chastant at ITS no later than Thursday, January 24, 2019, at 3:00 P.M. (Central Time). Responses may be delivered by hand, via regular mail, overnight delivery, e-mail, or by fax. Fax number is (601) 713-6380. ITS WILL NOT BE RESPONSIBLE FOR DELAYS IN

21

mailto:[email protected]

http://www.mississippi.org/assets/docs/minority/minority_vendor_selfcertform.pdf


THE DELIVERY OF PROPOSALS. It is solely the responsibility of the Vendor that proposals reach ITS on time. Vendors should contact Jill Chastant to verify the receipt of their proposals. Proposals received after the deadline will be rejected.

16.2 If you have any questions concerning this request, please e-mail Jill Chastant of ITS at [email protected]. Any questions concerning the specifications detailed in this LOC must be received no later than Friday, January 4, 2019, at 3:00 P.M. (Central Time).

Enclosures: Attachment A, Cost Information FormAttachment B, Reference Information FormAttachment C, Proposal Exception Summary FormAttachment D, Standard Purchase Agreement

22


ATTACHMENT ACOST INFORMATION FORM – LOC NUMBER 44647

Please submit all unit and extended costs, as well as all required supporting details and other requested information, using the format below. Vendors proposing equivalent solutions should use the part number and description columns below to itemize components of their proposed solution.

Send your completed Cost Information Form, along with your point-by-point response to the LOC, a completed Reference Information Form, and your Proposal Exception Summary Form, to the Technology Consultant listed below on or before the date and time indicated in the Procurement Project Schedule. If all necessary information is not included, your response cannot be considered.

ITS Technology Consultant Name: Jill Chastant RFP # 3849

Company Name: Date:

Contact Name: Phone #:

Contact E-mail:

PART # DESCRIPTION QTY UNIT COST EXTENDED COST**

Next Generation Firewall with advance malware protection with High Availability Redundancy

PAN-PA-5220-AC Palo Alto Networks PA-5220 with redundant AC power supplies or functional equivalent 1

PAN-PA-5220-AC-OSS On-site Spare Palo Alto Networks PA-5220 with redundant AC power supplies or functional equivalent 1

PAN-SVC-PREM-5220-3YR Premium support 3-year prepaid, PA-5220 or functional equivalent 1

PAN-PA-5220-TP-3YR Threat prevention subscription 3-year prepaid, PA-5200 or functional equivalent 1

PAN-PA-5220-URL4-3YR PANDB URL filtering subscription 3-year prepaid, PA-5220 or functional equivalent 1

PAN-PA-5220-WF-3YR WildFire subscription 3-year prepaid, PA-5220 or 1

of 41


functional equivalent

Palo Alto Networks Firewall 8.1 EssentialsCH-PAN-EDU-210-VIRTUAL Configuration and Management (EDU-210) 2PAN-PA-5200-RACK4 Palo Alto Networks PA-5200 4 post rack mount kit 1

PAN-SFP-PLUS-SRSFP+ form factor, SR 10Gb optical transceiver, short reach 300m, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant

4

Professional Implementation Services 1Installation ** Installation and configuration. Migrate, convert or replicate

existing configurations. 1

Optional Onsite Training ** Administration training 6 -10 people 1Optional Remote Training ** Administration training 6 -10 people 1Total Year 1 support 24/7/365 same-day resolution level 1Total Year 2 support 24/7/365 same-day resolution level 1Total Year 3 support 24/7/365 same-day resolution level 1Total Year 4 support 24/7/365 same-day resolution level 1Total Year 5 support 24/7/365 same-day resolution level 1

TOTAL 3-YEAR COST:

If any of the items below are included in Vendor’s proposal they must be detailed below.

Warranty:Installation:**Maintenance:Training:*Manufacturer model number, not Vendor number. If Vendor's internal number is needed for purchase order, include an additional column for that number**If Vendor travel is necessary to meet the requirements of the LOC, the Vendor should propose fully loaded costs including travel

of 41

ATTACHMENT BREFERENCE INFORMATION FORM

The information provided below will be used to contact references.

EntitySupervisor’s NameSupervisor’s TitleSupervisor’s Telephone #Supervisor’s E-Mail AddressLength of ProjectBrief Description of Project



of 41


ATTACHMENT CPROPOSAL EXCEPTION SUMMARY FORM

ITS LOC Reference

Vendor Proposal Reference

Brief Explanation of Exception

ITS Acceptance (sign here only if accepted)

(Reference specific outline point to which exception is taken)

(Page, section, items in Vendor’s proposal where exception is explained)

(Short description of exception being made)

of 41


ATTACHMENT DPROJECT NUMBER 44647PURCHASE AGREEMENT

BETWEENVENDOR NAME

ANDMISSISSIPPI DEPARTMENT OF INFORMATION TECHNOLOGY SERVICES

AS CONTRACTING AGENT FOR THEPUBLIC EMPLOYEES’ RETIREMENT SYSTEM

This Purchase Agreement (hereinafter referred to as “Agreement”) is entered into by and between VENDOR NAME, a STATE OF INCORPORATION corporation having its principal place of business at VENDOR ADDRESS (hereinafter referred to as “Seller”), and Mississippi Department of Information Technology Services having its principal place of business at 3771 Eastwood Drive, Jackson, Mississippi 39211 (hereinafter referred to as “ITS”), as contracting agent for the Mississippi Public Employees’ Retirement System, 429 Mississippi Street, Jackson, Mississippi 39201 (hereinafter referred to as “Purchaser”). ITS and Purchaser are sometimes collectively referred to herein as “State”.

WHEREAS, Purchaser, pursuant to Letter of Configuration Number 44647 dated INSERT DATE OF PUBLICATION (hereinafter referred to as “LOC”), based on General Request for Proposals (“RFP”) No. 3849, requested proposals for the acquisition of certain software and services (hereinafter referred to as “Products”) as listed in Exhibit A which is attached hereto and incorporated herein; and

WHEREAS, Seller was the successful proposer in an open, fair and competitive procurement process;

NOW THEREFORE, in consideration of the mutual understandings, promises, consideration and agreements set forth, the parties hereto agree as follows:

ARTICLE 1 TERM OF AGREEMENT1.1 This Agreement will become effective on the date it is signed by all parties and will continue in effect until all tasks required herein, including any post warranty maintenance/support specified in Exhibit A, have been completed. Seller agrees to complete all tasks required under this Agreement, with the exception of warranty service, on or before the close of business on June 30, 2019, or within such other period as may be agreed to by the parties.

1.2 This Agreement will become a binding obligation on the State only upon the issuance of a valid purchase order by the Purchaser following contract execution and the issuance by ITS of the CP-1 Acquisition Approval Document.

ARTICLE 2 FURNISHING OF HARDWARE2.1 Subject to the terms and conditions set forth herein, Seller agrees to provide and Purchaser agrees to buy as needed, the Products listed in the attached Exhibit A and at the purchase price set forth therein, but in no event will the total compensation to be paid hereunder exceed the specified sum of $INSERT AMOUNT unless prior written authorization from ITS has been obtained. Purchaser shall submit a purchase order signed by a representative of Purchaser itemizing the Products to be purchased. The purchase order shall be subject to the

of 41


terms and conditions of this Agreement. The parties agree that Purchaser reserves the right to adjust the quantities of purchases based upon the availability of funding or as determined necessary by Purchaser. Seller guarantees pricing for a period of fifteen (15) days from the effective date of this Agreement. In the event there is a national price decrease of the Products bid during this time, Seller agrees to extend the new, lower pricing to Purchaser.

2.2 The Products provided by Seller shall meet or exceed the minimum specifications set forth in LOC, General RFP No. 3849 and the Seller’s Proposals in response thereto.

ARTICLE 3 DELIVERY, RISK OF LOSS, INSTALLATION AND ACCEPTANCE3.1 Seller shall deliver the Products to the location specified by Purchaser and pursuant to the delivery schedule set forth by Purchaser.

3.2 Seller shall assume and shall bear the entire risk of loss and damage to the Products from any cause whatsoever while in transit and at all times throughout its possession thereof.

3.3 Seller shall complete installation of the Products pursuant to the requirements set forth in the LOC, General RFP No. 3849. Seller acknowledges that installation shall be accomplished with minimal interruption of Purchaser’s normal day to day operations.

3.4 Seller shall be responsible for replacing, restoring or bringing to at least original condition any damage to floors, ceilings, walls, furniture, grounds, pavements, sidewalks, and the like caused by its personnel and operations during the installation, subject to final approval of ITS. The repairs will be done only by technicians skilled in the various trades involved, using materials and workmanship to match those of the original construction in type and quality.

3.5 Seller shall be responsible for installing all equipment, cable and materials in accordance with all State, Federal and industry standards for such items.

3.6 Purchaser shall accept or reject the Products provided by Seller after a fifteen (15) day testing period utilizing testing criteria developed by Purchaser. During the acceptance period, Purchaser shall have the opportunity to evaluate and test the Products to confirm that it performs without any defects and performs pursuant to the specifications set forth in the LOC and General RFP No. 3849. Purchaser shall notify Seller in writing of its acceptance of the Products.

3.7 In the event the Product fails to perform as stated above, Purchaser shall notify Seller. Seller shall, within fifteen (15) working days and at Seller’s sole expense, correct the defects identified by Purchaser or replace the defective Product. Purchaser reserves the right to return the defective Product to Seller at the Seller’s expense and to cancel this Agreement.

ARTICLE 4 TITLE TO EQUIPMENTTitle to the equipment provided under this Agreement shall pass to Purchaser upon its acceptance of the equipment.

ARTICLE 5 CONSIDERATION AND METHOD OF PAYMENT5.1 Once the Products have been accepted by Purchaser as prescribed in Article 3 herein, Seller shall submit an invoice for the cost and shall certify that the billing is true and correct. Services will be invoiced as they are rendered. Seller shall submit invoices and supporting documentation to Purchaser electronically during the term of this Agreement using the

of 41


processes and procedures identified by the State. Purchaser agrees to pay Seller in accordance with Mississippi law on “Timely Payments for Purchases by Public Bodies”, Sections 31-7-301, et seq. of the 1972 Mississippi Code Annotated, as amended, which generally provides for payment of undisputed amounts by the State within forty-five (45) days of receipt of the invoice. Seller understands and agrees that Purchaser is exempt from the payment of taxes. All payments shall be in United States currency. Payments by state agencies using Mississippi’s Accountability System for Government Information and Collaboration (MAGIC) shall be made and remittance information provided electronically as directed by the State. The payments by these agencies shall be deposited into the bank account of the Seller’s choice. No payment, including final payment, shall be construed as acceptance of defective Products or incomplete work, and the Seller shall remain responsible and liable for full performance in strict compliance with the contract documents specified in the article herein titled “Entire Agreement”.

5.2 Acceptance by the Seller of the last payment from the Purchaser shall operate as a release of all claims against the State by the Seller and any subcontractors or other persons supplying labor or materials used in the performance of any work under this Agreement.

ARTICLE 6 WARRANTIES6.1 Seller represents and warrants that Seller has the right to sell the equipment and license the software provided under this Agreement.

6.2 Seller represents and warrants that Purchaser shall acquire good and clear title to the equipment purchased hereunder, free and clear of all liens and encumbrances.

6.3 Seller represents and warrants that each unit of equipment delivered shall be delivered new and not as “used, substituted, rebuilt, refurbished or reinstalled” equipment.

6.4 Seller represents and warrants that it has and will obtain and pass through to Purchaser any and all warranties obtained or available from the licensor of software or the manufacturer of the equipment.

6.5 Seller represents and warrants that all equipment provided pursuant to this Agreement shall, for a period of one (1) year from the date of acceptance of each item of equipment, be free from defects in material, manufacture, design and workmanship. Seller’s obligation pursuant to this warranty shall include, but is not limited to, the repair or replacement of the equipment at no cost to Purchaser. In the event Seller cannot repair or replace an item of equipment during the warranty period, Seller shall refund the purchase price of the equipment, and refund any fees paid for services that directly relate to the defective hardware.

6.6 Seller represents and warrants that the Products provided by Seller shall meet or exceed the minimum specifications set forth in the LOC, General RFP No. 3849 and Seller’s Proposals in response thereto.

6.7 Seller represents and warrants that all software furnished shall be free from material defects for a period of one (1) year after acceptance and will function in accordance with the specifications as stated in the LOC, General RFP No. 3849 and the Seller’s Proposals in response thereto. If the software does not function accordingly, Seller shall, at no cost to Purchaser, replace the software or refund the fees paid for the software and for any services that directly relate to the defective software.

of 41


6.8 Seller represents and warrants that there is no disabling code or lockup program or device embedded in the software provided to Purchaser. Seller further agrees that it will not, under any circumstances including enforcement of a valid contract right, (a) install or trigger a lockup program or device, or (b) take any step which would in any manner interfere with Purchaser’s use of the software and/or which would restrict Purchaser from accessing its data files or in any way interfere with the transaction of Purchaser’s business. For any breach of this warranty, Seller at its expense shall, within five (5) working days after receipt of notification of the breach, deliver Products to Purchaser that are free of such disabling code, lockup program or device.

6.9 Seller represents and warrants that the software, as delivered to Purchaser, does not contain a computer virus. For any breach of this warranty, Seller, at its expense, shall, within five (5) business days after receipt of notification of the breach, deliver Products to Purchaser that are free of any virus and shall be responsible for repairing, at Seller’s expense, any and all damage done by the virus to Purchaser’s site.

6.10 Seller represents and warrants that its services hereunder shall be performed by competent personnel and shall be of professional quality consistent with generally accepted industry standards for the performance of such services and shall comply in all respects with the requirements of this Agreement. For any breach of this warranty, the Seller shall, for a period of ninety (90) days from performance of the service, perform the services again, at no cost to Purchaser, or if Seller is unable to perform the services as warranted, Seller shall reimburse Purchaser the fees paid to Seller for the unsatisfactory services.

6.11 If applicable under the given circumstances, Seller represents and warrants that it will ensure its compliance with the Mississippi Employment Protection Act, Section 71-11-1, et seq. of the Mississippi Code Annotated (Supp2008), and will register and participate in the status verification system for all newly hired employees. The term “employee” as used herein means any person that is hired to perform work within the State of Mississippi. As used herein, “status verification system” means the Illegal Immigration Reform and Immigration Responsibility Act of 1996 that is operated by the United States Department of Homeland Security, also known as the E-Verify Program, or any other successor electronic verification system replacing the E-Verify Program. Seller agrees to maintain records of such compliance and, upon request of the State and approval of the Social Security Administration or Department of Homeland Security where required, to provide a copy of each such verification to the State. Seller further represents and warrants that any person assigned to perform services hereunder meets the employment eligibility requirements of all immigration laws of the State of Mississippi. Seller understands and agrees that any breach of these warranties may subject Seller to the following: (a) termination of this Agreement and ineligibility for any state or public contract in Mississippi for up to three (3) years, with notice of such cancellation/termination being made public, or (b) the loss of any license, permit, certification or other document granted to Seller by an agency, department or governmental entity for the right to do business in Mississippi for up to one (1) year, or (c) both. In the event of such termination/cancellation, Seller would also be liable for any additional costs incurred by the State due to contract cancellation or loss of license or permit.

6.13 Seller represents and warrants that no official or employee of Purchaser or of ITS, and no other public official of the State of Mississippi who exercises any functions or responsibilities in the review or approval of the undertaking or carrying out of the project shall, prior to the completion of said project, voluntarily acquire any personal interest, direct or indirect, in this

of 41


Agreement. The Seller warrants that it has removed any material conflict of interest prior to the signing of this Agreement, and that it shall not acquire any interest, direct or indirect, which would conflict in any manner or degree with the performance of its responsibilities under this Agreement. The Seller also warrants that in the performance of this Agreement no person having any such known interests shall be employed.

6.14 The Seller represents and warrants that no elected or appointed officer or other employee of the State of Mississippi, nor any member of or delegate to Congress has or shall benefit financially or materially from this Agreement. No individual employed by the State of Mississippi shall be admitted to any share or part of the Agreement or to any benefit that may arise therefrom. The State of Mississippi may, by written notice to the Seller, terminate the right of the Seller to proceed under this Agreement if it is found, after notice and hearing by the ITS Executive Director or his/her designee, that gratuities in the form of entertainment, gifts, jobs, or otherwise were offered or given by the Seller to any officer or employee of the State of Mississippi with a view toward securing this Agreement or securing favorable treatment with respect to the award, or amending or making of any determinations with respect to the performing of such contract, provided that the existence of the facts upon which the ITS Executive Director makes such findings shall be in issue and may be reviewed in any competent court. In the event this Agreement is terminated under this article, the State of Mississippi shall be entitled to pursue the same remedies against the Seller as it would pursue in the event of a breach of contract by the Seller, including punitive damages, in addition to any other damages to which it may be entitled at law or in equity.

ARTICLE 7 INFRINGEMENT INDEMNIFICATION7.1 Seller represents and warrants, to the best of its knowledge, that neither the software, its elements nor the use thereof violates or infringes upon any copyright, patent, trademark, servicemark, trade secret or other proprietary right of any person or entity. The software manufacturer or third party licensor, as applicable, in accordance with its contract with Purchaser and at its own expense, shall defend or settle any and all infringement actions filed against Seller or Purchaser which involve the software or other items provided under this Agreement and shall pay all settlements, as well as all costs, attorney fees, damages and judgment finally awarded against Purchaser. If the continued use of the Products for the purpose intended is threatened to be enjoined or is enjoined by any court of competent jurisdiction, the software manufacturer or third party licensor, as applicable shall, at its expense: (a) first procure for Purchaser the right to continue using such Products, or upon failing to procure such right; (b) modify or replace them with non-infringing products, or upon failing to secure either such right, (c) refund to Purchaser the purchase price or software license fees previously paid by Purchaser for the Products Purchaser may no longer use. Said refund shall be paid within ten (10) business days of notice to Purchaser to discontinue said use.

7.2 The parties understand and agree that pursuant to Section 100 of the Mississippi Constitution, the State can’t agree to indemnify Seller or any third party.

ARTICLE 8 EMPLOYMENT STATUS8.1 Seller shall, during the entire term of this Agreement, be construed to be an independent contractor. Nothing in this Agreement is intended to nor shall it be construed to create an employer-employee relationship or a joint venture relationship.

8.2 Seller represents that it is qualified to perform the duties to be performed under this Agreement and that it has, or will secure, if needed, at its own expense, applicable personnel

of 41


who shall be qualified to perform the duties required under this Agreement. Such personnel shall not be deemed in any way directly or indirectly, expressly or by implication, to be employees of Purchaser. Seller shall pay, when due, all salaries and wages of its employees, and it accepts exclusive responsibility for the payment of federal income tax, state income tax, social security, unemployment compensation, and any other withholdings that may be required. Neither Seller nor employees of Seller are entitled to state retirement or leave benefits.

8.3 Any person assigned by Seller to perform the services hereunder shall be the employee of Seller, who shall have the sole right to hire and discharge its employee. Purchaser may, however, direct Seller to replace any of its employees under this Agreement. If Seller is notified within the first eight (8) hours of assignment that the person is unsatisfactory, Seller will not charge Purchaser for those hours.

8.4 It is further understood that the consideration expressed herein constitutes full and complete compensation for all services and performances hereunder, and that any sum due and payable to Seller shall be paid as a gross sum with no withholdings or deductions being made by Purchaser for any purpose from said contract sum.

ARTICLE 9 BEHAVIOR OF EMPLOYEES/SUBCONTRACTORSSeller will be responsible for the behavior of all its employees and subcontractors while on the premises of any Purchaser location. Any employee or subcontractor acting in a manner determined by the administration of that location to be detrimental, abusive, or offensive to any of the staff and/or student body, will be asked to leave the premises and may be suspended from further work on the premises. All Seller employees and subcontractors who will be working at such locations to install or repair Products shall be covered by Seller’s comprehensive general liability insurance policy.

ARTICLE 10 MODIFICATION OR RENEGOTIATIONThis Agreement may be modified only by written agreement signed by the parties hereto, and any attempt at oral modification shall be void and of no effect. The parties agree to renegotiate the Agreement if federal and/or state revisions of any applicable laws or regulations make changes in this Agreement necessary.

ARTICLE 11 AUTHORITY, ASSIGNMENT AND SUBCONTRACTS11.1 In matters of proposals, negotiations, contracts, and resolution of issues and/or disputes, the parties agree that Seller represents all contractors, third parties, and/or subcontractors Seller has assembled for this project. The Purchaser is required to negotiate only with Seller, as Seller’s commitments are binding on all proposed contractors, third parties, and subcontractors.

11.2 Neither party may assign or otherwise transfer this Agreement or its obligations hereunder without the prior written consent of the other party, which consent shall not be unreasonably withheld. Any attempted assignment or transfer of its obligations without such consent shall be null and void. This Agreement shall be binding upon the parties’ respective successors and assigns.

11.3 Seller must obtain the written approval of Purchaser before subcontracting any portion of this Agreement. No such approval by Purchaser of any subcontract shall be deemed in any way to provide for the incurrence of any obligation of Purchaser in addition to the total fixed price agreed upon in this Agreement. All subcontracts shall incorporate the terms of this Agreement

of 41


and shall be subject to the terms and conditions of this Agreement and to any conditions of approval that Purchaser may deem necessary.

11.4 Seller represents and warrants that any subcontract agreement Seller enters into shall contain a provision advising the subcontractor that the subcontractor shall have no lien and no legal right to assert control over any funds held by the Purchaser, and that the subcontractor acknowledges that no privity of contract exists between the Purchaser and the subcontractor and that the Seller is solely liable for any and all payments which may be due to the subcontractor pursuant to its subcontract agreement with the Seller. The Seller shall indemnify and hold harmless the State from and against any and all claims, demands, liabilities, suits, actions, damages, losses, costs and expenses of every kind and nature whatsoever arising as a result of Seller’s failure to pay any and all amounts due by Seller to any subcontractor, materialman, laborer or the like.

11.5 All subcontractors shall be bound by any negotiation, arbitration, appeal, adjudication or settlement of any dispute between the Seller and the Purchaser, where such dispute affects the subcontract.

ARTICLE 12 AVAILABILITY OF FUNDSIt is expressly understood and agreed that the obligation of Purchaser to proceed under this Agreement is conditioned upon the appropriation of funds by the Mississippi State Legislature and the receipt of state and/or federal funds for the performances required under this Agreement. If the funds anticipated for the fulfillment of this Agreement are not forthcoming, or are insufficient, either through the failure of the federal government to provide funds or of the State of Mississippi to appropriate funds, or if there is a discontinuance or material alteration of the program under which funds were available to Purchaser for the payments or performance due under this Agreement, Purchaser shall have the right to immediately terminate this Agreement, without damage, penalty, cost or expense to Purchaser of any kind whatsoever. The effective date of termination shall be as specified in the notice of termination. Purchaser shall have the sole right to determine whether funds are available for the payments or performances due under this Agreement. In the event of termination, Seller shall be paid for services rendered by Seller in connection with this Agreement and accepted by Purchaser as of the date of receipt of notification of termination.

ARTICLE 13 TERMINATION13.1 Notwithstanding any other provision of this Agreement to the contrary, this Agreement may be terminated, in whole or in part, as follows: (a) upon the mutual, written agreement of the parties; (b) If either party fails to comply with the terms of this Agreement, the non-defaulting party may terminate the Agreement upon the giving of thirty (30) days written notice unless the breach is cured within said thirty (30) day period; (c) Purchaser may terminate the Agreement in whole or in part without the assessment of any penalties upon thirty (30) days written notice to Seller if Seller becomes the subject of bankruptcy, reorganization, liquidation or receivership proceedings, whether voluntary or involuntary, or (d) Purchaser may terminate the Agreement without the assessment of any penalties for any reason after giving thirty (30) days written notice specifying the effective date thereof to Seller. The provisions of this Article do not limit either party’s right to pursue any other remedy available at law or in equity.

of 41


13.2 Purchaser has the option, without assessment of any penalties, of terminating all or part the services upon a thirty (30) day notice to Seller. Upon termination, Seller shall refund any and all applicable unexpended prorated annual service fees previously paid by the Purchaser.

ARTICLE 14 GOVERNING LAWThis Agreement shall be construed and governed in accordance with the laws of the State of Mississippi and venue for the resolution of any dispute shall be Jackson, Hinds County, Mississippi. Seller expressly agrees that under no circumstances shall Purchaser or ITS be obligated to pay an attorneys fee, prejudgment interest or the cost of legal action to Seller. Further, nothing in this Agreement shall affect any statutory rights Purchaser may have that cannot be waived or limited by contract.

ARTICLE 15 WAIVERFailure of either party hereto to insist upon strict compliance with any of the terms, covenants and conditions hereof shall not be deemed a waiver or relinquishment of any similar right or power hereunder at any subsequent time or of any other provision hereof, nor shall it be construed to be a modification of the terms of this Agreement. A waiver by the State, to be effective, must be in writing, must set out the specifics of what is being waived, and must be signed by an authorized representative of the State.

ARTICLE 16 SEVERABILITYIf any term or provision of this Agreement is prohibited by the laws of the State of Mississippi or declared invalid or void by a court of competent jurisdiction, the remainder of this Agreement shall be valid and enforceable to the fullest extent permitted by law provided that the State’s purpose for entering into this Agreement can be fully achieved by the remaining portions of the Agreement that have not been severed.

ARTICLE 17 CAPTIONSThe captions or headings in this Agreement are for convenience only, and in no way define, limit or describe the scope or intent of any provision or section of this Agreement.

ARTICLE 18 HOLD HARMLESSTo the fullest extent allowed by law, Seller shall indemnify, defend, save and hold harmless, protect and exonerate Purchaser, ITS and the State, its Board Members, officers, employees, agents and representatives from and against any and all claims, demands, liabilities, suits, actions, damages, losses, costs and expenses of every kind and nature whatsoever, including without limitation, court costs, investigative fees and expenses, attorney fees and claims for damages arising out of or caused by Seller and/or its partners, principals, agents, employees, or subcontractors in the performance of or failure to perform this Agreement.

ARTICLE 19 THIRD PARTY ACTION NOTIFICATIONSeller shall notify Purchaser in writing within five (5) business days of Seller filing bankruptcy, reorganization, liquidation or receivership proceedings or within five (5) business days of its receipt of notification of any action or suit being filed or any claim being made against Seller or Purchaser by any entity that may result in litigation related in any way to this Agreement and/or which may affect the Seller’s performance under this Agreement. Failure of the Seller to provide such written notice to Purchaser shall be considered a material breach of this Agreement and the Purchaser may, at its sole discretion, pursue its rights as set forth in the Termination Article herein and any other rights and remedies it may have at law or in equity.

of 41


ARTICLE 20 AUTHORITY TO CONTRACTSeller warrants that it is a validly organized business with valid authority to enter into this Agreement; that entry into and performance under this Agreement is not restricted or prohibited by any loan, security, financing, contractual or other agreement of any kind, and notwithstanding any other provision of this Agreement to the contrary, that there are no existing legal proceedings, or prospective legal proceedings, either voluntary or otherwise, which may adversely affect its ability to perform its obligations under this Agreement.

ARTICLE 21 NOTICEAny notice required or permitted to be given under this Agreement shall be in writing and personally delivered or sent by electronic means provided that the original of such notice is sent by certified United States mail, postage prepaid, return receipt requested, or overnight courier with signed receipt, to the party to whom the notice should be given at their business address listed herein. ITS’ address for notice is: Craig P. Orgeron, Ph.D., Executive Director, Mississippi Department of Information Technology Services, 3771 Eastwood Drive, Jackson, Mississippi 39211. Purchaser’s address for notice is: Mr. Walter Hille, Chief Systems Information Officer, Mississippi Public Employees’ Retirement System, 429 Mississippi Street, Jackson, Mississippi 39201. The Seller’s address for notice is: VENDOR NOTICE INFORMATION. Notice shall be deemed given when actually received or when refused. The parties agree to promptly notify each other in writing of any change of address.

ARTICLE 22 RECORD RETENTION AND ACCESS TO RECORDSSeller shall establish and maintain financial records, supporting documents, statistical records and such other records as may be necessary to reflect its performance of the provisions of this Agreement. The Purchaser, ITS, any state or federal agency authorized to audit Purchaser, and/or any of their duly authorized representatives, shall have unimpeded, prompt access to this Agreement and to any of the Seller’s proposals, books, documents, papers and/or records that are pertinent to this Agreement to make audits, copies, examinations, excerpts and transcriptions at the State’s or Seller’s office as applicable where such records are kept during normal business hours. All records relating to this Agreement shall be retained by the Seller for three (3) years from the date of receipt of final payment under this Agreement. However, if any litigation or other legal action, by or for the state or federal government has begun that is not completed at the end of the three (3) year period, or if an audit finding, litigation or other legal action has not been resolved at the end of the three (3) year period, the records shall be retained until resolution.

ARTICLE 23 INSURANCESeller represents that it will maintain workers’ compensation insurance as prescribed by law which shall inure to the benefit of Seller's personnel, as well as comprehensive general liability and employee fidelity bond insurance. Seller will, upon request, furnish Purchaser with a certificate of conformity providing the aforesaid coverage.

ARTICLE 24 DISPUTESAny dispute concerning a question of fact under this Agreement which is not disposed of by agreement of the Seller and Purchaser shall be decided by the Executive Director of ITS or his/her designee. This decision shall be reduced to writing and a copy thereof mailed or furnished to the parties. Disagreement with such decision by either party shall not constitute a breach under the terms of this Agreement. Such disagreeing party shall be entitled to seek such other rights and remedies it may have at law or in equity.

of 41


ARTICLE 25 COMPLIANCE WITH LAWS25.1 Seller shall comply with, and all activities under this Agreement shall be subject to, all Purchaser policies and procedures, and all applicable federal, state and local laws, regulations, policies and procedures as now existing and as may be amended or modified. Specifically, but not limited to, Seller shall not discriminate against any employee nor shall any party be subject to discrimination in the performance of this Agreement because of race, creed, color, sex, age, national origin or disability. Further, if applicable, Seller shall comply with the provisions of the Davis-Bacon Act including, but not limited to, the wages, recordkeeping, reporting and notice requirements set forth therein.

25.2 Seller represents and warrants that it will comply with the state’s data breach notification laws codified at Section 75-24-29 of the Mississippi Code Annotated (Supp. 2012). Further, to the extent applicable, Seller represents and warrants that it will comply with the applicable provisions of the HIPAA Privacy Rule and Security Regulations (45 CFR Parts 160, 162 and 164) (“Privacy Rule” and “Security Regulations”, individually; or “Privacy and Security Regulations”, collectively); and the provisions of the Health Information Technology for Economic and Clinical Health Act, Title XIII of the American Recovery and Reinvestment Act of 2009, Pub. L. No. 111-5 (the “HITECH Act”).

ARTICLE 26 CONFLICT OF INTERESTSeller shall notify Purchaser of any potential conflict of interest resulting from the representation of or service to other clients. If such conflict cannot be resolved to Purchaser’s satisfaction, Purchaser reserves the right to terminate this Agreement.

ARTICLE 27 SOVEREIGN IMMUNITYBy entering into this Agreement with Seller, the State of Mississippi does in no way waive its sovereign immunities or defenses as provided by law.

ARTICLE 28 CONFIDENTIAL INFORMATION28.1 Seller shall treat all Purchaser data and information to which it has access by its performance under this Agreement as confidential and shall not disclose such data or information to a third party without specific written consent of Purchaser. In the event that Seller receives notice that a third party requests divulgence of confidential or otherwise protected information and/or has served upon it a subpoena or other validly issued administrative or judicial process ordering divulgence of such information, Seller shall promptly inform Purchaser and thereafter respond in conformity with such subpoena to the extent mandated by state and/or federal laws, rules and regulations. This Article shall survive the termination or completion of this Agreement, shall continue in full force and effect, and shall be binding upon the Seller and its agents, employees, successors, assigns, subcontractors, or any party or entity claiming an interest in this Agreement on behalf of or under the rights of the Seller following any termination or completion of this Agreement.

28.2 With the exception of any attached exhibits which are labeled as "confidential", the parties understand and agree that this Agreement, including any amendments and/or change orders thereto, does not constitute confidential information, and may be reproduced and distributed by the State without notification to Seller. ITS will provide third party notice to Seller of any requests received by ITS for any such confidential exhibits so as to allow Seller the opportunity to protect the information by court order as outlined in ITS Public Records Procedures.

of 41


28.3 The parties understand and agree that pursuant to §25-61-9(7) of the Mississippi Code of 1972, as amended, the contract provisions specifying the commodities purchased or the services provided; the price to be paid; and the term of this Agreement shall not be deemed confidential information.

ARTICLE 29 EFFECT OF SIGNATUREEach person signing this Agreement represents that he or she has read the Agreement in its entirety, understands its terms, is duly authorized to execute this Agreement on behalf of the parties and agrees to be bound by the terms contained herein. Accordingly, this Agreement shall not be construed or interpreted in favor of or against the State or the Seller on the basis of draftsmanship or preparation hereof.

ARTICLE 30 OWNERSHIP OF DOCUMENTS AND WORK PRODUCTSAll data, electronic or otherwise, collected by Seller and all documents, notes, programs, data bases (and all applications thereof), files, reports, studies, and/or other material collected and prepared by Seller in connection with this Agreement, whether completed or in progress, shall be the property of Purchaser upon completion of this Agreement or upon termination of this Agreement. Purchaser hereby reserves all rights to the databases and all applications thereof and to any and all information and/or materials prepared in connection with this Agreement. Seller is prohibited from use of the above described information and/or materials without the express written approval of Purchaser.

ARTICLE 31 NON-SOLICITATION OF EMPLOYEESSeller agrees not to employ or to solicit for employment, directly or indirectly, any of the Purchaser’s employees until at least one (1) year after the expiration/termination of this Agreement unless mutually agreed to the contrary in writing by the Purchaser and the Seller and provided that such an agreement between these two entities is not a violation of the laws of the State of Mississippi or the federal government.

ARTICLE 32 ENTIRE AGREEMENT32.1 This Agreement constitutes the entire agreement of the parties with respect to the subject matter contained herein and supersedes and replaces any and all prior negotiations, understandings and agreements, written or oral, between the parties relating hereto, including all terms of any unsigned or “shrink-wrap” license included in any package, media or electronic version of Seller-furnished software, or any “click-wrap” or “browse-wrap” license presented in connection with a purchase via the internet. The LOC, General RFP No. 3849 and Seller’s Proposals in response thereto are hereby incorporated into and made a part of this Agreement.

32.2 The Agreement made by and between the parties hereto shall consist of, and precedence is hereby established by the order of the following:

A. This Agreement signed by both parties;B. Any exhibits attached to this Agreement;C. LOC;D. General RFP No. 3849 and written addenda, andE. Seller’s Proposals, as accepted by Purchaser, in response to the LOC and General RFP

No. 3849.

32.3 The intent of the above listed documents is to include all items necessary for the proper execution and completion of the services by the Seller. The documents are complementary, and

of 41


what is required by one shall be binding as if required by all. A higher order document shall supersede a lower order document to the extent necessary to resolve any conflict or inconsistency arising under the various provisions thereof; provided, however, that in the event an issue is addressed in one of the above mentioned documents but is not addressed in another of such documents, no conflict or inconsistency shall be deemed to occur by reason thereof. The documents listed above are shown in descending order of priority, that is, the highest document begins with the first listed document (“A. This Agreement”) and the lowest document is listed last (“D. Seller’s Proposal”).

ARTICLE 33 SURVIVALArticles 6, 7, 14, 18, 22, 27, 28, 30, 31 and all other articles, which by their express terms so survive or which should so reasonably survive, shall survive any termination or expiration of this Agreement.

ARTICLE 34 DEBARMENT AND SUSPENSION CERTIFICATIONSeller certifies that neither it nor its principals: (a) are presently debarred, suspended, proposed for debarment, declared ineligible or voluntarily excluded from covered transactions by any federal department or agency; (b) have, within a three (3) year period preceding this Agreement, been convicted of or had a civil judgment rendered against them for commission of fraud or a criminal offense in connection with obtaining, attempting to obtain or performing a public (federal, state or local) transaction or contract under a public transaction; violation of federal or state anti-trust statutes or commission of embezzlement, theft, forgery, bribery, falsification or destruction of records, making false statements or receiving stolen property; (c) are presently indicted of or otherwise criminally or civilly charged by a governmental entity with the commission of fraud or a criminal offense in connection with obtaining, attempting to obtain or performing a public (federal, state or local) transaction or contract under a public transaction; violation of federal or state anti-trust statutes or commission of embezzlement, theft, forgery, bribery, falsification or destruction of records, making false statements or receiving stolen property, and (d) have, within a three (3) year period preceding this Agreement, had one or more public transaction (federal, state or local) terminated for cause or default.

ARTICLE 35 COMPLIANCE WITH ENTERPRISE SECURITY POLICYSeller and Purchaser understand and agree that all products and services provided by Seller under this Agreement must be and remain in compliance with the State of Mississippi’s Enterprise Security Policy. The parties understand and agree that the State’s Enterprise Security Policy is based on industry-standard best practices, policy, and guidelines at the time of contract execution. The State reserves the right to introduce a new policy during the term of this Agreement and require the Seller to comply with same in the event the industry introduces more secure, robust solutions or practices that facilitate a more secure posture for the State of Mississippi.

ARTICLE 36 COMPLIANCE WITH ENTERPRISE CLOUD AND OFFSITE HOSTING SECURITYIf applicable, Seller and Purchaser understand and agree that all products and services provided by the Seller under this Agreement must be and remain in compliance with the State of Mississippi’s Enterprise Cloud and Offsite Hosting Security Policy. The parties understand and agree that the State’s Enterprise Cloud and Offsite Hosting Security Policy is based on industry-standard best practices, policy, and guidelines at the time of contract execution and augments the Enterprise Security Policy. The State reserves the right to introduce a new policy during the term of this Agreement and require the Seller to comply with same in the event the industry

of 41


introduces more secure, robust solutions or practices that facilitate a more secure posture for the State of Mississippi.

ARTICLE 36 STATUTORY AUTHORITYBy virtue of Section 25-53-21 of the Mississippi Code Annotated, as amended, the Executive Director of ITS is the purchasing and contracting agent for the State of Mississippi in the negotiation and execution of all contracts for the acquisition of information technology equipment, software, and services. The parties understand and agree that ITS as contracting agent is not responsible or liable for the performance or non-performance of any of Purchaser’s or Seller’s contractual obligations, financial or otherwise, contained within this Agreement. The parties further acknowledge that ITS is not responsible for ensuring compliance with any guidelines, conditions, or requirements mandated by Purchaser’s funding source.

ARTICLE 37 TRANSPARENCYIn accordance with the Mississippi Accountability and Transparency Act of 2008, §27-104-151, et seq., of the Mississippi Code of 1972, as Amended, the American Accountability and Transparency Act of 2009 (P.L. 111-5), where applicable, and §31-7-13 of the Mississippi Code of 1972, as amended, where applicable, a fully executed copy of this Agreement and any subsequent amendments and change orders shall be posted to the State of Mississippi’s accountability website at: https://www.transparency.mississippi.gov. Prior to ITS posting the Agreement and any subsequent amendments and change orders to the website, any attached exhibits which contain trade secrets or other proprietary information and are labeled as “confidential” will be redacted by ITS. Notwithstanding the preceding, however, it is understood and agreed that pursuant to §25-61-9(7) of the Mississippi Code of 1972, as amended, the contract provisions specifying the commodities purchased or the services provided; the price to be paid; and the term of this Agreement shall not be deemed a trade secret or confidential commercial or financial information and shall thus not be redacted.

ARTICLE 38 FORCE MAJEUREEach party shall be excused from performance for any period and to the extent that it is prevented from performing any obligation or service, in whole or in part, as a result of causes beyond the reasonable control and without the fault or negligence of such party and/or its subcontractors. Such acts shall include without limitation acts of God, strikes, lockouts, riots, acts of war or terrorism, epidemics, governmental regulations superimposed after the fact, fire, earthquakes, floods, or other natural disasters (the “Force Majeure Events”). When such a cause arises, the Seller shall notify the Purchaser immediately in writing of the cause of its inability to perform; how it affects its performance, and the anticipated duration of the inability to perform. Delays in delivery or in meeting completion dates due to Force Majeure Events shall automatically extend such dates for a period equal to the duration of the delay caused by such events, unless the State determines it to be in its best interest to terminate this Agreement.

of 41


For the faithful performance of the terms of this Agreement, the parties have caused this Agreement to be executed by their undersigned representatives.

State of Mississippi, Department ofInformation Technology Services, onbehalf of Mississippi Public Employees’ Retirement System

VENDOR NAME

By:________________________________ By:_______________________________Authorized Signature Authorized Signature

Printed Name: Craig P. Orgeron, Ph.D. Printed Name:______________________

Title: Executive Director Title:______________________________

Date: ______________________________ Date:______________________________

of 41


EXHIBIT A

of 41

memorandum for general rfp configurationdsitspe01.its.ms.gov/.../$file/44647loc.docx · web...

Documents